Search for packages
| purl | pkg:composer/typo3/cms-core@9.5.48 |
| Tags | Ghost |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-2fx5-pggv-6jjr
Aliases: CVE-2024-55892 |
TYPO3 Potential Open Redirect via Parsing Differences ### Problem Applications that use `TYPO3\CMS\Core\Http\Uri` to parse externally provided URLs (e.g., via … | There are no reported fixed by versions. |
| Advisory | Summary | Aliases |
|---|---|---|
|
CVE-2024-34358
|
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature … |
GHSA-36g8-62qv-5957
|
|
CVE-2024-34357
|
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the … |
GHSA-hw6c-6gwq-3m3m
|
|
CVE-2024-34356
|
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to … |
GHSA-v6mw-h7w6-59w3
|
|
GHSA-36g8-62qv-5957
|
TYPO3 vulnerable to an Uncontrolled Resource Consumption in the ShowImageController ### Problem The `ShowImageController` (_eID tx_cms_showpic_) lacks a cryptographic HMAC-signature … |
CVE-2024-34358
|
|
GHSA-hw6c-6gwq-3m3m
|
TYPO3 vulnerable to Cross-Site Scripting in the ShowImageController ### Problem Failing to properly encode user-controlled values in file entities, the … |
CVE-2024-34357
|
|
GHSA-v6mw-h7w6-59w3
|
TYPO3 vulnerable to Cross-Site Scripting in the Form Manager Module ### Problem The form manager backend module is vulnerable to … |
CVE-2024-34356
|